Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
File: xGglzBDkwis4XEo3r5DzC2iBQRo.mft (raw, json)
Hash identifier: ZsfjcLnmOnG1CVfuBoailYxFp908N5WC7OaP9eUk5h4=
Subject key identifier: 10:99:F9:C3:D5:8D:39:A0:A7:14:1F:14:33:8D:B8:38:B7:AC:26:D0
Authority key identifier: C4:68:25:CC:10:E4:C2:2B:38:5C:4A:37:AF:90:F3:0B:68:81:41:1A
Certificate issuer: /CN=c46825cc10e4c22b385c4a37af90f30b6881411a
Certificate serial: 0199FEB52A1B276A14264302DE1034C3BFF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
Manifest number: 07BD
Signing time: Sun 19 Oct 2025 23:01:49 +0000
Manifest this update: Sun 19 Oct 2025 23:01:49 +0000
Manifest next update: Mon 20 Oct 2025 23:01:49 +0000
Files and hashes: 1: xGglzBDkwis4XEo3r5DzC2iBQRo.crl (hash: 7q5CqHmZ4uOyWc+armNp6L8crctzZ2iijeyQFDEfEcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:2a:1b:27:6a:14:26:43:02:de:10:34:c3:bf:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c46825cc10e4c22b385c4a37af90f30b6881411a
Validity
Not Before: Oct 19 23:01:49 2025 GMT
Not After : Oct 20 23:01:49 2025 GMT
Subject: CN=1099f9c3d58d39a0a7141f14338db838b7ac26d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:34:76:c8:f6:95:03:18:0f:26:6c:01:55:
cc:8d:11:54:00:f1:5d:c9:fb:a8:c5:74:79:a4:02:
62:5e:25:f5:07:7e:d2:26:b8:a3:a1:44:d2:e1:d3:
5d:d7:1f:a5:2a:94:b0:0e:4d:5d:6b:be:e1:48:c5:
e6:6b:2e:d7:9e:e3:a7:77:6d:b8:a6:cf:fa:21:10:
7a:47:da:bb:08:01:39:8e:d7:aa:f6:fd:b1:56:ad:
29:92:5c:6d:08:f0:a1:92:75:d5:ad:fd:ef:ae:48:
86:bf:f1:df:2a:f8:19:4c:b4:88:df:bc:a1:94:1c:
62:31:2c:c7:ee:03:c9:2c:1d:a2:ec:01:c1:58:8d:
12:91:d5:a6:68:70:40:b0:36:30:1f:01:03:cb:9d:
cc:25:5c:0a:35:8d:71:9c:26:26:9c:ea:fa:9d:21:
61:fb:c5:0d:c0:3f:2c:29:3d:ee:71:eb:9c:b6:86:
a1:fb:51:3e:ef:4c:14:f9:3a:fd:90:ab:7f:f5:17:
47:93:dd:73:82:98:3f:a0:64:70:5d:f6:05:08:b2:
bf:8e:e9:15:80:56:38:14:fd:b2:07:00:38:7d:7c:
e3:51:a2:69:df:b6:a1:f5:e9:33:d9:f1:d7:35:4f:
83:9c:3d:3f:da:22:d9:b1:56:df:34:b6:ce:5a:d9:
7e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:99:F9:C3:D5:8D:39:A0:A7:14:1F:14:33:8D:B8:38:B7:AC:26:D0
X509v3 Authority Key Identifier:
keyid:C4:68:25:CC:10:E4:C2:2B:38:5C:4A:37:AF:90:F3:0B:68:81:41:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:09:67:f8:e1:77:6a:50:80:be:3d:d7:eb:2e:f4:13:5f:73:
53:13:77:a8:1f:67:99:78:6a:80:44:0f:94:e3:d9:b2:f4:39:
56:02:bd:ce:f0:9e:42:61:30:ed:be:56:d9:f2:37:e9:dd:a3:
ba:2d:18:51:4b:af:7a:3d:d9:f1:f6:a8:18:50:ed:f0:44:86:
dc:74:99:b5:63:bc:b2:e6:83:57:47:64:1e:83:a2:e0:22:96:
e3:5e:c4:71:98:af:6d:54:7c:15:80:ce:f3:7c:a3:35:d3:7c:
6f:04:cc:c8:c2:cf:c3:4e:5f:52:d8:75:a0:24:fb:7f:f1:05:
12:70:4c:88:97:a4:a3:8b:af:4a:60:6d:a5:0a:a4:0c:09:3a:
58:f6:df:72:68:ab:c4:06:f2:c1:45:dd:67:06:51:38:37:5d:
81:35:97:3f:b8:ea:5c:7a:c6:a9:c6:06:b0:1d:98:0a:6c:49:
4d:6a:1f:70:20:de:e7:e6:6f:d2:e2:1d:97:a8:8d:74:8f:df:
b5:0a:64:fe:29:79:98:3f:33:98:c8:af:24:ce:5a:d5:6d:9b:
19:9c:9c:d0:61:f9:ce:d6:34:a9:96:b8:ee:cb:4c:94:be:f3:
bd:49:b1:a9:11:4a:e2:fc:7f:a4:d2:c4:b0:75:c1:7c:1b:2a:
97:c3:bb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:43 2025 by rpki-client